Last updated: 2026-09-06

Website privacy notice

This notice covers visits to the website, enquiries initiated through it and applications received from it. When a proposal is accepted, the privacy notice provided to customers takes over.

1. Data controller

LA²SOFT has not appointed a data protection officer. The two founders handle requests sent to this address.

2. Visiting the website

In its current configuration, the website:

• sets no cookies or other trackers; a strictly necessary, consent-exempt session cookie exists only in the restricted administration area;
• uses no browser local storage or advertising pixels;
• measures its audience on its own server, as aggregate daily counters: the language of the page, the site a link came from, any campaign tag, and the country;
• reads your IP address in memory, long enough to derive the country from a file held on our own servers, and then discards it: it is written nowhere and never leaves our server;
• reads the identification string your browser sends with every request (the “User-Agent”) and keeps from it a single yes-or-no indication: does this visit look like a robot? The string itself is kept nowhere;
• records, when a page that does not exist is reached from another website, the domain of that website and a coarse category of the address requested, for example “/fr/” or “/assets/”, without the full address or anything that follows it;
• serves fonts, images and video from its own domain, without embedded third-party resources.

These measurements rest on our legitimate interest in knowing where our visitors come from, in telling automated traffic apart from human traffic, and in repairing the links that lead to us. They are kept for the periods given in section 7.

Nothing is written to your device or read from it, so no consent is required and there is no cookie banner. An external link, such as the Data Protection Authority link, contacts that website only if you choose to open it.

The hosting provider nevertheless keeps technical logs that may contain the IP address, date, time, requested resource and browser information. They are used for website security and availability, based on our legitimate interest.

Website hosting provider: Clever Cloud SAS — Paris (PAR), France.
Log retention and backup rotation period: 7 days.

3. Professional enquiries

The form asks for your name, company, role, email, optional phone number, type of need, information about the installation, deadline and message. Provide only information that is useful to your enquiry.

When you send the form, its contents are transmitted to our server, which immediately relays them by email to our business mailbox. Email is handled by Mailfence / ContactOffice Group SA, named in section 6; the message is then kept there like any other mail, for the periods given in section 7.

The website's server keeps no copy of your enquiry: no message, no contact details, no attachment, no queue. It passes the message on and forgets it. It only increments a daily counter for the type of need you selected, on the basis of our legitimate interest in knowing which situations are brought to us. On very low-traffic days that counter cannot be considered fully anonymous; it is erased under the enquiry retention period in point 7. If delivery fails, nothing is recorded and the form offers you the option of writing to us directly.

To limit automated submissions, the server holds enough to count you — your IP address, or only part of it — and a number of recent attempts, in memory. These counters contain no part of your message and are written to no disk. They disappear on every restart of the server; between restarts, an entry is removed after fifteen minutes of inactivity, or to make room for a new visitor.

If delivery does not succeed, the form can prepare an email in your mail application. The content is then handed to that application, which may keep a draft of it: that retention depends on your software and your device, not on LA²SOFT.

We use this information to understand and answer the enquiry, arrange a meeting and, where relevant, prepare a proposal. This is based on our legitimate interest in answering a professional enquiry and on pre-contractual steps requested by the prospect.

After a meeting, contact details and commercial follow-up may be entered in Dolibarr. Proposals and the information needed to understand them may be kept in Nextcloud. Business cards are destroyed after the useful details have been entered and checked.

4. Optional commercial follow-ups

An optional box lets you agree that LA²SOFT may contact you later by email or phone about services that may be relevant to your company. This agreement is never required to send an enquiry or receive a reply. The sent message records the version of the notice you accepted so that we can retain evidence of your agreement.

You may withdraw your agreement at any time, without giving a reason or paying a fee, by replying to the message or writing to info@la2soft.com. Commercial follow-ups then stop. We keep only the identifiers needed in a suppression list so that a deleted record is not recreated and contacted again.

5. Job applications

An application received by email may contain your identity, contact details, CV, covering letter and any information you choose to send. It is used to review your profile and reply, as part of pre-contractual steps taken at your request.

An unsuccessful unsolicited application normally remains in Mailfence. During an active recruitment process, it may also be placed in Nextcloud. Access is currently limited to the two founders. If an external recruiter is used in future, this notice will be updated and access will be governed before any application is shared.

6. Recipients and tools

• Mailfence / ContactOffice Group SA provides email;
• Hetzner hosts the separate Dolibarr and Nextcloud servers in the European Union;
• the founders access Mailfence, Nextcloud and recruitment files;
• employees or contractors entrusted with a commercial assignment may receive limited access to Dolibarr. Contractors are contractually bound.

We do not sell or rent data. We carry out no profiling or automated decision-making.

7. Retention periods

• Enquiry without a meeting: 3 years after the last exchange.
• Prospect met, without a proposal: 5 years after the last meaningful interaction. An unanswered follow-up does not extend this period.
• Proposal not concluded: 10 years after its expiry, rejection or the last meaningful exchange, to retain the proposed scope and material needed to defend our rights. Drafts, duplicates and irrelevant exchanges are deleted sooner.
• Job application: 12 months after receipt, unless you request earlier deletion or are hired.
• Commercial objection: minimum identifiers are kept while LA²SOFT carries out commercial prospecting, with periodic review of obsolete data.
• Aggregate arrival counters: no time limit. They contain no IP address, no identifier and no page visited. The type-of-need counter (point 3) and the broken inbound link counters are not covered by that absence of a limit: they follow the enquiry periods above.

A meaningful interaction includes a reply, a new meeting, an enquiry or explicit agreement to continue discussions. If a proposal is accepted, the file moves under the customer privacy notice. Deletion from active systems then reaches backups according to their rotation cycle.

8. Location and security

Mailfence hosts email in Belgium. Dolibarr and Nextcloud are hosted by Hetzner in the European Union. Copies may be synchronised to authorised founders' devices. LA²SOFT requires storage encryption, locking and maintained security updates on those devices.

Those devices may accompany a founder while travelling outside the European Economic Area while remaining under LA²SOFT's control. We therefore do not promise that every physical copy remains in the European Union at all times.

9. Your rights

Subject to the GDPR's conditions, you may request access, rectification, erasure, restriction or portability of your data. You may object to processing based on legitimate interests. Once an aggregate arrival counter has been written it no longer relates to an identifiable person: we can neither find it, correct it nor erase it on your behalf, so an objection applies going forward. You may object to commercial prospecting at any time, in which case follow-ups stop. You may also withdraw consent without affecting processing already carried out.

Write to info@la2soft.com and identify the relevant exchange. We may request information needed to verify your identity. We normally reply within one month and without charge.

10. Complaints and changes

You may lodge a complaint with the Belgian supervisory authority:

We will update this notice before any material change to the form, recipients, tools or audience measurement, and then change the date at the top of the page.